SunPump Meme Token Toolkit
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the TRON blockchain and SunPump API, such as token metadata and descriptions, which could be used for injection attacks.
- Ingestion points: Read commands such as
sun sunpump token getandsun sunpump token rankingdescribed inSKILL.md. - Boundary markers: The skill includes a 'Security Rules' section and an 'Agent Pre-Validation Checklist' that mandate user previews and confirmations.
- Capability inventory: Subprocess calls to the
sunCLI for critical operations likesun swapandsun sunpump launch. - Sanitization: Relies on structured
--jsonoutput for parsing but does not describe internal data sanitization of descriptive fields. - [EXTERNAL_DOWNLOADS]: Requires the installation of the
@sun-protocol/sun-clinpm package from the public registry. - [COMMAND_EXECUTION]: Operates by executing shell commands via the
sunCLI to perform blockchain-related tasks, which is the primary intended function of the skill.
Audit Metadata